Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/37a34d7c029d27177263b94bb348977f7e7f1e06.roa
File:                     37a34d7c029d27177263b94bb348977f7e7f1e06.roa (raw, json)
Hash identifier:          JKpGlnywsSgJCNAvpfWZlV4a9ohqkj/I28EFRZx9dcM=
Subject key identifier:   01:37:AE:6D:50:34:31:EC:54:CD:4B:57:63:DC:BA:45:E5:42:BB:50
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0C6BEF
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/37a34d7c029d27177263b94bb348977f7e7f1e06.roa
Signing time:             Sat 03 Sep 2022 05:51:06 +0000
ROA not before:           Sat 03 Sep 2022 03:00:00 +0000
ROA not after:            Sun 03 Sep 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 814063 (0xc6bef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Sep  3 03:00:00 2022 GMT
            Not After : Sep  3 03:00:00 2023 GMT
        Subject: CN=37a34d7c029d27177263b94bb348977f7e7f1e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:67:e9:c1:a3:5c:93:43:aa:71:fc:36:00:08:
                    02:49:dc:a4:6b:04:a9:2d:07:71:6c:f1:78:74:9b:
                    01:ce:73:6c:99:90:0d:f5:b4:11:1e:2f:60:39:a9:
                    04:38:fe:55:6d:96:2e:76:62:76:5c:1b:66:75:d2:
                    db:1b:6e:ee:6a:41:6e:28:ee:03:92:61:02:4f:29:
                    bf:bd:74:52:02:90:ae:f5:8c:bf:d3:64:d6:fe:99:
                    d4:a0:b6:e8:b6:3b:f3:52:7a:3b:1c:40:6c:f0:32:
                    bd:d5:ad:95:17:39:f7:d2:0e:0b:59:ce:e8:b4:e4:
                    1b:a3:1a:29:f1:9e:c8:ec:c6:72:85:20:5a:b9:dd:
                    a2:6e:31:c2:e0:8e:1f:a8:97:0e:a3:03:8a:d1:27:
                    2e:a3:cf:65:99:79:20:9f:f0:8a:e5:db:8d:c7:72:
                    81:2c:a7:10:31:c5:d4:bc:a9:9d:5d:6c:89:4d:1d:
                    92:00:c0:d8:b5:b6:20:90:86:91:27:13:0d:af:1f:
                    c4:b4:ec:1e:d5:8d:05:5f:4c:f2:13:89:a7:b4:c9:
                    de:c9:6e:5c:60:f2:34:7c:91:d0:e7:3e:8f:5f:7c:
                    7d:3d:6d:05:72:f2:62:0f:86:e1:fb:53:77:a9:a7:
                    bb:b4:53:30:3e:4d:37:57:c1:f2:1c:24:93:c8:20:
                    00:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:37:AE:6D:50:34:31:EC:54:CD:4B:57:63:DC:BA:45:E5:42:BB:50
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/37a34d7c029d27177263b94bb348977f7e7f1e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:47:ac:ef:ac:24:a5:91:14:3c:26:df:0f:64:b7:8f:53:c7:
         48:51:2d:bc:19:20:3f:97:4c:88:9d:80:42:a5:2e:1d:04:e1:
         4d:2d:28:1c:55:35:db:0e:3a:f0:98:3b:63:ae:47:bf:69:eb:
         db:0e:81:10:16:92:bf:81:72:04:cc:58:0d:f6:f9:d4:8f:1a:
         e3:44:26:ef:8b:66:32:f0:30:85:c6:ba:98:fe:c7:11:1c:38:
         6c:a0:a0:01:d6:1b:c1:cc:5e:a6:89:e7:50:56:7c:90:c7:e5:
         fd:7f:de:09:a0:a3:de:c4:ed:80:0b:36:89:8c:ba:d6:77:25:
         ad:fa:c3:69:11:6e:cc:5a:9c:35:36:8e:87:1c:a9:b5:6d:f9:
         ca:12:f4:c4:23:0a:6d:05:13:27:b8:57:8a:18:dd:6d:05:57:
         14:6a:a8:72:85:db:55:81:35:23:2c:55:7a:92:cb:46:84:1c:
         fc:5f:7f:19:0a:79:e5:21:19:c1:38:6f:3e:ac:4b:da:c1:05:
         6a:ec:3b:25:7a:a2:be:f1:9b:f6:30:d7:54:0a:1c:7b:3a:df:
         5f:a6:13:cc:20:5a:2e:4b:c6:17:92:70:fb:46:ad:82:de:ee:
         2c:0f:9c:eb:96:88:a5:60:07:b0:79:7b:7e:1c:e7:ba:43:c1:
         b4:85:f1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----